diff --git a/versions.env b/versions.env
index e250ad8..f056c3c 100644
--- a/versions.env
+++ b/versions.env
@@ -19,11 +19,13 @@ PGVECTOR_COMPILED_REPO=nicoloboschi/pgvector_compiled
 # This works on every supported distro: 22.04 has the same SONAMEs natively;
 # 24.04+ keeps libxml2.so.2 around but in a newer ICU lineage; 25.10+ has
 # neither, but the bundled libxml2.so.2 + libicu70 fills both gaps.
-LIBXML2_DEB_VERSION=2.9.13+dfsg-1ubuntu0.12
-LIBXML2_DEB_URL_AMD64=https://archive.ubuntu.com/ubuntu/pool/main/libx/libxml2/libxml2_2.9.13+dfsg-1ubuntu0.12_amd64.deb
-LIBXML2_DEB_SHA256_AMD64=b3678e6e4b166bc0e4226fb118d489ab51802c772914421397c9dcb2dd0e0d2b
-LIBXML2_DEB_URL_ARM64=https://ports.ubuntu.com/ubuntu-ports/pool/main/libx/libxml2/libxml2_2.9.13+dfsg-1ubuntu0.12_arm64.deb
-LIBXML2_DEB_SHA256_ARM64=6feb8502740e786e7d6a8d89e3d8d1060aaf6f27ad48bf279cb3c19b451eb16f
+# Launchpad keeps every published .deb; the archive pool drops superseded
+# point releases (that is how the previous ubuntu0.12 pin broke).
+LIBXML2_DEB_VERSION=2.9.13+dfsg-1ubuntu0.14
+LIBXML2_DEB_URL_AMD64=https://launchpad.net/ubuntu/+archive/primary/+files/libxml2_2.9.13+dfsg-1ubuntu0.14_amd64.deb
+LIBXML2_DEB_SHA256_AMD64=16e395b2c52d6ab232053468febc69f0876956ec2fae357a941a2a8dab36574f
+LIBXML2_DEB_URL_ARM64=https://launchpad.net/ubuntu/+archive/primary/+files/libxml2_2.9.13+dfsg-1ubuntu0.14_arm64.deb
+LIBXML2_DEB_SHA256_ARM64=1e85b731baabd51331d70a6392c652bc39fa2c231ff784555bd6a61631009387
 LIBICU_DEB_VERSION=70.1-2ubuntu1
 LIBICU_DEB_URL_AMD64=http://archive.ubuntu.com/ubuntu/pool/main/i/icu/libicu70_70.1-2ubuntu1_amd64.deb
 LIBICU_DEB_SHA256_AMD64=223c1e6cebf2a6748637303227d8b84337c14a2d30eacbc46a68d02557dcff3e